Live tracker of exploited and high-impact vulnerabilities
New vulnerabilities from CERTs, vendors, researchers and newsrooms in 180+ countries, checked automatically, with how widely each one is being exploited, warned about and covered.
Panic meter
Connecting- Researchers talking
- –
- News outlets covering
- –
- CERTs and agencies warning
- –
Distinct people and organisations discussing new vulnerabilities in the past 24 hours.
Trending now
Outbreak map
- Countries in the news
- –
- Agencies warning
- –
- Countries warned
- –
- Patient zero
- –
Daily panic
Vulnerabilities
Linux vulnerabilities
Every Linux vulnerability Vulnocalypse is tracking, newest first: whether it’s being exploited, which CERTs have warned about it and how widely it’s covered. Subscribe with the RSS feed for Linux alerts.
- 74impact
CISA ແຈ້ງເຕືອນຊ່ອງໂຫວ່ລະດັບຄວາມຮຸນແຮງສູງເທິງ Linux ກຳລັງຖືກໃຊ້ໃນການໂຈມຕີຈາກກຸ່ມ Ransomware
Known exploited (KEV) (CISA)0 news outlets1 CERTs0 researchersCVSS 7.8 - 76impact
Linux Kernel Local Privilege Escalation – "Copy Fail" (CVE-2026-31431)
Known exploited (KEV) (CISA)0 news outlets2 CERTs0 researchersCVSS 7.8 - 22impact
bpf: Fix stack-out-of-bounds write in devmap
0 news outlets0 CERTs0 researchers - 24impact
mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
0 news outlets0 CERTs0 researchers - 36impact
dm-thin: fix metadata refcount underflow
0 news outlets0 CERTs0 researchersCVSS 7.8 - 22impact
mm/hugetlb: fix hugetlb_pmd_shared()
0 news outlets0 CERTs0 researchers - 24impact
team: better TEAM_OPTION_TYPE_STRING validation
0 news outlets0 CERTs0 researchers - 23impact
net: usb: rtl8150: enable basic endpoint checking
0 news outlets0 CERTs0 researchers - 45impact
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
0 news outlets0 CERTs0 researchersCVSS 7.5 - 43impact
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
0 news outlets0 CERTs0 researchersCVSS 7.3 - 22impact
net: usb: aqc111: Do not perform PM inside suspend callback
0 news outlets0 CERTs0 researchers - 37impact
nbd: don't allow reconnect after disconnect
0 news outlets0 CERTs0 researchersCVSS 7.8 - 22impact
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
0 news outlets0 CERTs0 researchers - 23impact
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
0 news outlets0 CERTs0 researchers - 37impact
scsi: ufs: bsg: Set bsg_queue to NULL after removal
0 news outlets0 CERTs0 researchersCVSS 7.8 - 43impact
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
0 news outlets0 CERTs0 researchersCVSS 8.4 - 23impact
dmaengine: idxd: fix device leaks on compat bind and unbind
0 news outlets0 CERTs0 researchers - 22impact
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
0 news outlets0 CERTs0 researchers - 23impact
netfilter: xt_multiport: validate range encoding in checkentry
0 news outlets0 CERTs0 researchers - 22impact
platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
0 news outlets0 CERTs0 researchers - 45impact
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
0 news outlets0 CERTs0 researchersCVSS 7.5 - 30impact
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
0 news outlets0 CERTs0 researchersCVSS 5.5 - 23impact
perf/x86/intel: Fix crash in icl_update_topdown_event()
0 news outlets0 CERTs0 researchers - 22impact
usb: gadget: f_ncm: Fix net_device lifecycle with device_move
0 news outlets0 CERTs0 researchers - 37impact
pps: Fix a use-after-free
0 news outlets0 CERTs0 researchersCVSS 7.8 - 37impact
mptcp: always handle address removal under msk socket lock
0 news outlets0 CERTs0 researchersCVSS 7.8 - 23impact
ipv6: Fix potential uninit-value access in __ip6_make_skb()
0 news outlets0 CERTs0 researchers - 22impact
net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
0 news outlets0 CERTs0 researchers - 46impact
scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
0 news outlets0 CERTs0 researchersCVSS 8.8 - 23impact
ext4: refresh inline data size before write operations
0 news outlets0 CERTs0 researchers - 22impact
wifi: libertas: fix use-after-free in lbs_free_adapter()
0 news outlets0 CERTs0 researchers - 23impact
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
0 news outlets0 CERTs0 researchers - 47impact
ipv4: icmp: validate reply type before using icmp_pointers
0 news outlets0 CERTs0 researchersCVSS 8.2 - 37impact
ndisc: use RCU protection in ndisc_alloc_skb()
0 news outlets0 CERTs0 researchersCVSS 7.8 - 22impact
xfrm_user: fix info leak in build_mapping()
0 news outlets0 CERTs0 researchers - 30impact
platform/x86: int3472: Check for adev == NULL
0 news outlets0 CERTs0 researchersCVSS 5.5 - 48impact
bridge: br_nd_send: linearize skb before parsing ND options
0 news outlets0 CERTs0 researchersCVSS 9.1 - 30impact
mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
0 news outlets0 CERTs0 researchersCVSS 5.5 - 23impact
netfilter: ctnetlink: use netlink policy range checks
0 news outlets0 CERTs0 researchers - 22impact
PM: runtime: Fix a race condition related to device removal
0 news outlets0 CERTs0 researchers - 24impact
USB: hub: Ignore non-compliant devices with too many configs or interfaces
0 news outlets0 CERTs0 researchers - 36impact
fs/buffer: fix use-after-free when call bh_read() helper
0 news outlets0 CERTs0 researchersCVSS 7.8 - 42impact
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
0 news outlets0 CERTs0 researchersCVSS 7.5 - 23impact
wifi: rtlwifi: remove unused check_buddy_priv
0 news outlets0 CERTs0 researchers - 23impact
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
0 news outlets0 CERTs0 researchers - 23impact
netfilter: nfnetlink_log: account for netlink header size
0 news outlets0 CERTs0 researchers - 42impact
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
0 news outlets0 CERTs0 researchersCVSS 7.5 - 23impact
pps: fix warning in pps_register_cdev when register device fail
0 news outlets0 CERTs0 researchers - 22impact
bpf: Fix reference count leak in bpf_prog_test_run_xdp()
0 news outlets0 CERTs0 researchers - 36impact
net: clear the dst when changing skb protocol
0 news outlets0 CERTs0 researchersCVSS 7.8 - 23impact
spi: fsl-cpm: Check length parity before switching to 16 bit mode
0 news outlets0 CERTs0 researchers - 34impact
mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
0 news outlets0 CERTs0 researchersCVSS 7.1 - 23impact
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
0 news outlets0 CERTs0 researchers - 22impact
net: rfkill: prevent unlimited numbers of rfkill events from being created
0 news outlets0 CERTs0 researchers - 36impact
mm/migrate: fix shmem xarray update during migration
0 news outlets0 CERTs0 researchersCVSS 7.8 - 37impact
openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
0 news outlets0 CERTs0 researchersCVSS 7.8 - 36impact
nfsd: provide locking for v4_end_grace
0 news outlets0 CERTs0 researchersCVSS 7.8 - 39impact
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
0 news outlets0 CERTs0 researchersCVSS 8.8 - 22impact
via_wdt: fix critical boot hang due to unnamed resource allocation
0 news outlets0 CERTs0 researchers - 23impact
wifi: mac80211: prohibit deactivating all links
0 news outlets0 CERTs0 researchers - 36impact
netfilter: nf_tables: always walk all pending catchall elements
0 news outlets0 CERTs0 researchersCVSS 7.8 - 22impact
nfnetlink_osf: validate individual option lengths in fingerprints
0 news outlets0 CERTs0 researchers - 51impact
rxrpc: reject undecryptable rxkad response tickets
0 news outlets0 CERTs0 researchersCVSS 9.8 - 23impact
erofs: handle overlapped pclusters out of crafted images properly
0 news outlets0 CERTs0 researchers - 22impact
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
0 news outlets0 CERTs0 researchers - 22impact
udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
0 news outlets0 CERTs0 researchers - 48impact
btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
0 news outlets0 CERTs0 researchersCVSS 9.1 - 40impact
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
0 news outlets0 CERTs0 researchersCVSS 7.8 - 22impact
crypto: qat - flush misc workqueue during device shutdown
0 news outlets0 CERTs0 researchers - 37impact
neighbour: use RCU protection in __neigh_notify()
0 news outlets0 CERTs0 researchersCVSS 7.8 - 23impact
esp: fix skb leak with espintcp and async crypto
0 news outlets0 CERTs0 researchers - 22impact
ip6_gre: make ip6gre_header() robust
0 news outlets0 CERTs0 researchers - 22impact
net/sched: ets: fix divide by zero in the offload path
0 news outlets0 CERTs0 researchers - 23impact
net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
0 news outlets0 CERTs0 researchers - 39impact
x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
0 news outlets0 CERTs0 researchersCVSS 8.8 - 42impact
libceph: return the handler error from mon_handle_auth_done()
0 news outlets0 CERTs0 researchersCVSS 7.5 - 23impact
net: qrtr: ns: Fix use-after-free in driver remove()
0 news outlets0 CERTs0 researchers - 23impact
dmaengine: idxd: Fix memory leak when a wq is reset
0 news outlets0 CERTs0 researchers - 44impact
SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
0 news outlets0 CERTs0 researchersCVSS 7.5 - 22impact
fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
0 news outlets0 CERTs0 researchers - 46impact
netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
0 news outlets0 CERTs0 researchersCVSS 8.2 - 23impact
netfilter: ctnetlink: fix refcount leak on table dump
0 news outlets0 CERTs0 researchers - 23impact
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
0 news outlets0 CERTs0 researchers - 41impact
HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
0 news outlets0 CERTs0 researchersCVSS 7.1 - 22impact
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
0 news outlets0 CERTs0 researchers - 23impact
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
0 news outlets0 CERTs0 researchers - 46impact
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
0 news outlets0 CERTs0 researchersCVSS 8.6 - 22impact
net: fix segmentation of forwarding fraglist GRO
0 news outlets0 CERTs0 researchers - 37impact
block: fix uaf for flush rq while iterating tags
0 news outlets0 CERTs0 researchersCVSS 7.8 - 22impact
KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
0 news outlets0 CERTs0 researchers - 23impact
vsock: fix buffer size clamping order
0 news outlets0 CERTs0 researchers - 23impact
net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
0 news outlets0 CERTs0 researchers - 43impact
net: fec: handle page_pool_dev_alloc_pages error
0 news outlets0 CERTs0 researchersCVSS 7.5 - 23impact
perf/x86/amd: Check event before enable to avoid GPF
0 news outlets0 CERTs0 researchers - 30impact
dlm: fix possible lkb_resource null dereference
0 news outlets0 CERTs0 researchersCVSS 5.5 - 23impact
netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
0 news outlets0 CERTs0 researchers - 22impact
scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
0 news outlets0 CERTs0 researchers - 43impact
RDMA/siw: Fix potential NULL pointer dereference in header processing
0 news outlets0 CERTs0 researchersCVSS 7.5 - 23impact
bfs: Reconstruct file type when loading from disk
0 news outlets0 CERTs0 researchers - 53impact
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
0 news outlets0 CERTs0 researchersCVSS 9.8
Sources
CERTs and cyber security agencies, national news outlets in every country we could find, vendor advisories, research blogs and the security press. Every source is polled on its own schedule, by RSS where possible and by headless browser where not. Broken feeds are repaired automatically; anything still failing is listed here.
Sources admin
Enter the admin token from your server’s .env file (ADMIN_TOKEN). It’s sent once to start a session and isn’t stored in this browser.
Recent sign-in activity
Pipeline, last 24 hours
How many articles each type of source produced, how many were read in full, and how many were linked to a vulnerability. “Unmatched” are articles that look like vulnerability news but couldn’t be linked; the reasons and examples show what to improve.
Add a source
Coverage
All sources
How it works
Vulnocalypse reads vulnerability registries, government CERTs, vendor advisories, research blogs and newsrooms around the clock, links everything that refers to the same vulnerability, and only shows what passes automated validation.
What gets into the feed
A vulnerability is admitted when it is corroborated, either through a published CVE record or through at least two independent organisations, and its impact score reaches 60 out of 100. Anything listed in a known-exploited catalogue is admitted regardless of score. Once admitted, an entry stays, so the feed never flickers.
Impact score
Up to 30 points for severity (CVSS, or inferred from the description when no score exists), 25 for exploitation, 15 for blast radius by product category (edge devices and identity systems score highest), 15 for attention from news, CERTs and researchers, 10 for EPSS exploitation probability, and 5 for pre-authentication. Every entry shows its breakdown.
Exploitation status
We only mark something exploited when there is a citable source: a KEV listing (CISA, VulnCheck or ENISA), a statement from the vendor or a government agency, CISA’s SSVC assessment, or at least two independent organisations reporting attacks with no later denial from the vendor. Phrases like “no evidence of exploitation” are detected and count against a claim.
Validation, without humans
Identifiers are checked against the CVE List; rejected or non-existent CVEs are dropped. Titles, vendors, products and CVSS come from the official record rather than from headlines. Wire stories syndicated across outlets are counted once. Roundups that list dozens of CVEs only count the ones they actually discuss. Reports without an identifier wait for corroboration and are merged into the right CVE once one is assigned. Every decision is logged and shown on each vulnerability’s page.
The Panic meter
Three numbers over the past 24 hours, counting only vulnerabilities first seen in the last 14 days: distinct researchers posting about them, distinct news organisations covering them, and distinct CERTs and agencies warning about them. Each is ranked against its own 90-day history, weighted 35% CERTs, 35% news and 30% researchers, and stretched so the top levels stay rare. Each day’s score is split across the vulnerabilities that caused it.
The outbreak map
The map shows two things for every country: how many national news outlets are covering new vulnerabilities, and whether the national CERT or cyber security agency has issued a warning. National outlets are read directly, through local-language Google News editions, and through GDELT, which attributes coverage in over 100 languages to its source country. International security press is left off the map so it shows national attention, not trade coverage. Replay the spread to watch a vulnerability travel from patient zero across the world.
Subscribe
- Everything (RSS), also as Atom and JSON Feed
- Exploited only and KEV-listed only
- Updates: new KEV listings, exploitation changes and public exploits for tracked vulnerabilities
- Per vendor:
/feed.xml?vendor=Fortinet, or by score:/feed.xml?min_score=80
Use it from an AI agent
Vulnocalypse runs a read-only MCP server. Add it to any MCP client as a remote server:
https://vulnocalypse.com/mcpTools: get_feed, search_vulnerabilities, get_vulnerability, check_exposure (send the products you run and get back anything that affects them), get_panic and explain_panic_day. The JSON API is documented at /api/docs.